30 NEW SEMGREP RULES AND A PRIMER ON GENERIC AND YAML FEATURES

Summary from the TLDR InfoSec newsletter

This post from Trail of Bits contains 30 new freely available Semgrep rules that it created for Ansible, Java, Kotlin, shell scripts, and Docker Compose. It also contains a detailed discussion of the pros and cons of Generic mode as a means of searching without syntax awareness, as well as an overview of the advantages of using YAML mode for scanning YAML files.